Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
File: lazTI5qu6vMSOhjdo_diO4EFNtI.mft (raw, json)
Hash identifier: uxaqZVfzqLr/jpvTm7/TXYfTtYpv4NueEDz1Jo8hjGU=
Subject key identifier: E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
Authority key identifier: 95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
Certificate issuer: /CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Certificate serial: 0688
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
Manifest number: 0688
Signing time: Sat 26 Apr 2025 13:07:58 +0000
Manifest this update: Sat 26 Apr 2025 13:07:58 +0000
Manifest next update: Sat 26 Apr 2025 19:07:58 +0000
Files and hashes: 1: lazTI5qu6vMSOhjdo_diO4EFNtI.crl (hash: YWL4KsVr+FRNZlv4VyQtO+ysv2U8+++PeoAYV7OPASE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Validity
Not Before: Apr 26 13:07:58 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E648C16B92E93D4A7B481029F3BE1838635C7A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:5c:80:ef:04:fa:0b:e3:a9:b7:62:2e:34:
82:27:27:82:04:5c:4e:e8:fc:b8:ce:60:93:81:2d:
0f:88:f9:0e:e8:bb:5d:d8:97:d4:35:b5:ad:84:e8:
a3:80:f9:3f:19:52:c7:d7:69:46:0e:c0:49:1c:18:
bf:d9:12:63:b1:a2:ea:e2:67:8b:bb:36:c3:b9:b3:
c1:f3:5a:60:3c:7f:9c:77:1f:4c:0a:f4:0e:7f:84:
2c:74:e3:2e:d1:6f:d3:8c:7e:cd:19:61:42:b5:79:
8a:b7:6e:e9:91:a5:d4:9a:1f:ad:0a:44:c0:94:94:
ca:d7:37:97:e6:8b:ce:a7:1e:92:b1:d0:d1:c1:b8:
3d:48:54:61:6e:f1:48:3d:17:24:0c:f7:c0:50:4e:
8c:49:e0:44:31:52:b9:cb:69:d9:bd:a4:d6:52:a2:
f5:c0:d1:13:ee:7e:8c:4b:71:10:75:25:39:a9:c5:
e1:10:38:36:44:13:57:f3:b6:7d:8f:f0:06:34:fd:
3f:d8:a9:96:00:66:af:87:59:07:6b:55:68:a2:17:
16:2f:df:26:80:d7:93:84:0d:39:05:0b:63:fe:fd:
1e:fa:af:f8:4c:c7:27:17:6b:1d:ad:39:20:bb:c1:
a3:d2:10:6e:e5:34:b9:23:9f:71:a1:eb:f5:69:7c:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
X509v3 Authority Key Identifier:
keyid:95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:01:64:7a:0e:0d:5a:f6:f4:53:38:da:03:88:69:41:cd:05:
21:74:b8:80:b7:aa:04:71:01:88:21:ca:0b:8d:0e:af:31:c6:
00:70:ab:68:ac:ba:9a:78:5c:1a:4e:9f:33:be:67:33:68:b2:
62:19:b0:fe:26:e0:6d:f6:da:fb:34:c5:13:9e:20:27:7a:fa:
b7:0f:71:b9:27:4b:31:2d:ed:92:79:0d:9a:12:07:0c:4e:9d:
f1:01:08:05:d6:46:13:ca:9e:5d:36:04:1e:1f:4d:7b:61:0f:
40:ba:ee:ec:28:21:79:02:e3:ec:4d:a7:6f:5e:9c:09:64:9d:
3f:38:08:2f:fe:1f:4a:84:f5:e6:bc:df:01:6b:2e:5c:49:74:
0a:a7:30:ba:45:9d:14:a8:11:c5:05:ad:aa:54:78:8f:37:cc:
dc:af:b8:d7:e7:9d:95:de:87:5c:e0:38:cd:a8:92:0e:e6:62:
52:46:6f:73:00:65:72:50:78:10:b2:e3:df:34:ec:5b:ec:87:
48:79:2e:6c:bb:91:39:56:21:39:cd:9c:4a:a8:69:fe:4a:f9:
f1:c4:7f:1d:92:2d:63:86:b5:58:09:fa:7d:3c:df:ee:d2:f2:
5b:20:cd:d5:84:f0:82:20:ac:3e:d2:fb:f4:ae:b1:e0:8a:c3:
be:a4:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:48 2025 by rpki-client